Vigor2800 Series ADSL2/2+ Security Router User’s Guide
 Table of Contents
 102
 Trouble Shooting 187
Application and Examples 159
 LED Indicators and Connectors
Preface
 For Vigor2800
Connector Explanation
LED Explanation
 For Vigor2800G
P2P
 For Vigor2800i
Isdn
 For Vigor2800Gi
Isdn
 For Vigor2800V
FXS2 & FXS1
 For Vigor2800VG
Wlan
 For Vigor2800VGi
 Hardware Installation
 This page is left blank
 Configuring Basic Settings
Changing Password
 Vigor2800 Series User’s Guide
 Quick Start Wizard
Adjusting Protocol/Encapsulation
VPI
 PPPoE/PPPoA
VCI
 Password
Confirm Password
Idle Timeout
User Name
 Bridged IP
 Routed IP
 Online Status
Online status for PPPoA/PPPoE Online status for Bridge
 Online status for Routed IP Primary DNS
Secondary DNS
IP Address in LAN
TX Packets
 Saving Configuration
 Internet Access
Basics of Internet Protocol IP Network
What are Public IP Address and Private IP Address
Get Your Public IP Address from ISP
 Below shows the menu items for Internet Access
 PPP Authentication Select PAP only or PAP or Chap for
PPP
 Vigor2800 Series User’s Guide
 Ports
 MPoA RFC1483/2684
 Data
IP Address Type in the private IP address
Subnet Mask Type in the subnet mask
Gateway IP Address Type in gateway IP address
 Multi-PVCs
Enable
Type in the value provided by your ISP
 LAN
Basics of LAN
 What is Static Route
What is Routing Information Protocol RIP
What are Virtual LANs and Rate Control
 General Setup
Subnet
 Dhcp Server
Configuration
Relay Agent 1st subnet/2nd subnet Specify which subnet that
 Static Route
DNS Server
Index
Destination Address
 Add Static Routes to Private and Public Networks
 Delete Static Route
 Disable Static Route
NAT
 Service Name
Port Redirection
 DMZ Host
Public Port
Private IP
Private Port
 Choose PC
 Open Ports
Comment
Aux. WAN IP
Local IP Address
 Enable Open Ports
Inactive or Active state
Local Computer
Start Port
 Basics for Firewall
Firewall
Firewall Facilities
 IP Filters
Stateful Packet Inspection SPI
 Denial of Service DoS Defense
Content Filtering
 Web Filtering
 Filter Setup
Call Filter
Data Filter
Log Flag
 Filter Rule
Next Filter Set
 Branch to other Filter
Set
Log
Direction
 Example
 5 P2P Blocking
IM Blocking
Action
 DoS Defense
 Block IP options
Block Land
Block Smurf
Block trace router
 URL Content Filter
Block Unknown
 Prevent web access
Control
White List pass those
Matching keyword
 Zip, rar, .arj, .ace, .cab, .sit
Exe, .com, .scr, .pif, .bas, .bat, .inf, .reg
Inside to outside world to protect the local users privacy
Files downloading from web pages. Accordingly, files with
 Web Content Filter
 Bind IP to MAC
 Bandwidth Management
Limit Session
 Default session limit
Setup
Limitation List
Start IP
 Default TX limit
Default RX limit
Limit Bandwidth
TX limit
 Quality of Service
 Enable the QoS Control
Class Name
Reserved Bandwidth Ratio
Reserved bandwidth to upstream speed and reserved
 Basic Settings for QoS
Advanced Settings for QoS
Enable UDP Bandwidth
On Line Statistics
 SrcEdit It allows you to edit source address information
 DiffServ CodePoint
 Service Type
 Enable the Function and Add a Dynamic DNS Account
Applications
Dynamic DNS
Index WAN Interface Domain Name
 Enable Dynamic
Disable the Function and Clear all Dynamic DNS Accounts
Active Display if this account is active or inactive
Delete a Dynamic DNS Account
 Enable Schedule Setup
Schedule
 Radius
 Server IP Address
Destination Port
Shared Secret
Re-type Shared Secret
 UPnP
 Cant work with Firewall Software
 Wake On LAN
Wake by
MAC Address
Wake Up
 Remote Access Control
VPN and Remote Access
PPP General Setup
 PAP
 IPSec General Setup
 Set to Factory Default
IPSec Peer Identity
Name
Next
 Vigor2800 Series User’s Guide
 Remote User Profiles
User
 Pptp
Isdn
L2TP
 Medium -Authentication Header AH means data will be
Check to enable Callback function -Enables the callback
Check to enable callback budget control -By default,
Callback Function
 LAN to LAN
 Enable this profile
Enable Ping to Keep Alive is used to handle abnormal
Profile Name
Call Direction
 PPP Authentication
IKE Authentication
Medium Authentication Header AH means data will be
L2TP with …
 3DES without Authentication -Use triple DES encryption
3DES with Authentication- Use triple DES encryption
High ESP-Encapsulating Security Payload- means
Advanced
 Perfect Forward Secret PFS- The IKE Phase 1 key will be
For I models only
Provide Isdn Number to Remote- In the case that
Allowed Dial-In Type
 VPN Gateway
Specify Clid or Remote
Digital Signature X.509 Check the box of Digital
 Callback Budget Unit minutes- Specify the time budget
My WAN IP
Remote Gateway IP
Remote Network IP
 Certificate Management
Connection Management
Dial
Refresh Seconds
 Local Certificate
Generate
Import
View
 Trusted CA Certificate
 Vigor2800 Series User’s Guide
 VoIP
Sip userpassword @ host port
Calling via SIP Servers
 Scenario Peer-to-Peer
Concepts of Isdn On-Net and Off-Net for 2800VGi only
Scenario
 DialPlan
Phone Book
 Digit Map
Phone Number
Display Name
SIP URL
 Prefix Number
OP Number
 SIP Accounts
 SIP Ping interval
Register via
SIP Port
Act as Outbound Proxy
 Authentication ID
Account Number/Name
Expiry Time
NAT Traversal Support
 Phone Settings
Phone List
 RTP
 Detailed Settings for VoIP 1
Session Timer
Hotline
Fax Function
 Call Waiting Call Transfer Prefer Codec Default SIP Account
Default Call Route
 Settings of Caller ID Type , Dial tone , Ringing tone , Busy
Region
 Volume Gain
Caller ID Type
Misc
Dtmf
 Detailed Settings for Isdn available for VGi model only
 Clir hide caller ID
DND Do Not Disturb
Play dial tone only when
 110
 Authentication PIN Code
Dtmp
 Disallow VoIP to Isdn Calls with the Following Prefixes
Status
Port
 Isdn
 Isdn Port
Country Code
Own Number
MSN Numbers for the Router
 Dialing to a Single ISP
Cbcp
 Dialing to Dual ISPs
Virtual TA
Fixed IP Address
Fixed IP Address Type the IP address
 117
 Virtual TA Server
User Profile
MSN1/ MSN2/MSN3
 MSN Configuration
 Dial Delay Interval
Call Control
Dial Retry
Remote Activation
 Basic Concepts
Wireless LAN
High Water Mark
 Security Overview
 Below shows the menu items for Wireless LAN
 General Settings
Enable Wireless LAN
Mixed 11b+11g+SuperG The radio can support
Index1-15
 Ssid
Channel
Hide Ssid
Long Preamble
 Security
 Pre-Shared Key PSK Either 8~63 Ascii characters
WPA
WEP
 Access Control
 11.5 WDS
 Choose the mode for WDS setting. Disable mode will not
 AP Discovery
 Into Access Contro l
Station List
 Vlan
Wired Vlan
Station Rate Control
 P1 P4
Wireless Vlan
VLAN0-3
 Login ID
Details
 How can you wireless client access into Internet?
 Vlan Cross Setup
 WVLAN0-15
 Wired Rate Control
Out
 Upload Rate
Wireless Rate Control
Download Rate
 System Maintenance
System Status
 Administrator Password
Configuration Backup
Backup the Configuration
DNS
 143
 Restore Configuration
Syslog/Mail Alert
 Authentication
 Time and Date
 Management
 Reboot System
 Firmware Upgrade
 WAN Connection
Diagnostics
Connection
 Routing Table
Dial-out Trigger
Refresh Click it to reload
 ARP Cache Table
Dhcp Table
Leased Time
Host ID
 NAT Sessions Table
Status
 Adsl Spectrum Analysis
 Wireless Vlan Online Station Table
Ping Diagnosis
Ping to
Run
 Data Flow Monitor
 Trace Route
TX rate kbps
RX rate kbps
Sessions
 158
 Application and Examples
 160
 161
 162
 163
 164
 165
 Settings in VPN Router in the enterprise office
 167
 Settings in the remote host
 169
 QoS Setting Example
 171
 LAN Created by Using NAT
 173
 174
 Calling via SIP Sever
Calling Scenario for VoIP function
CODEC/RTP/DTMF
 SIP URL 4321@draytel.org
 Settings for Arnor
Settings for Paulin
Peer-to-Peer Calling
Arnor calls Paulin
 Upgrade Firmware for Your Router
 179
 Request a certificate from a CA server on Windows CA Server
 Go to Certificate Management and choose Local Certificate
 182
 183
 184
 Time and Date to reset current time of the router first
 186
 Trouble Shooting
Checking If the Hardware Status Is OK or Not
 For Windows
 For MacOs
 Pinging the Router from Your Computer
For MacOs Terminal
 Checking If the ISP Settings are OK or Not
For PPPoE/PPPoA Users
 For MPoA Users
 Backing to Factory Default Setting If Necessary
Software Reset
Hardware Reset
Contacting Your Dealer